Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,346 npm 223,208 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,346 reports · Feed

npm
@pahinak/baileys 6.1.0
MAL-2026-18870

Oct 27, 2026
npm
@revinza/baileys 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.3, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9
MAL-2026-18882

Oct 27, 2026
npm
@zlynzee/baileys 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6
MAL-2026-18928

Oct 27, 2026
npm
@ranstech/baileys 6.1.0
MAL-2026-18879

Oct 27, 2026
npm
@primeroselotus/baileys 6.0.0
MAL-2026-18874 2 IOCs

Oct 27, 2026
npm
@yonzxofficiall/baileys 9.0.0, 9.0.1
MAL-2026-18920 2 IOCs

Oct 27, 2026
npm
@zeppeliorg/xzcbailz 1.0.0, 1.0.1, 1.0.2
MAL-2026-18926

Oct 27, 2026
npm
alip-baileys 1.0.0, 1.0.1, 1.0.2, 1.0.3
MAL-2026-18929 2 IOCs

Oct 27, 2026
npm
@zeppeliorg/wbails 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.7-beta, 1.0.8, 1.0.…
MAL-2026-18925

Oct 27, 2026
npm
arkaan-amane-baileys 8.7.10
MAL-2026-18936

Oct 27, 2026
npm
baileys-new-dtz 1.0.0, 1.0.1
MAL-2026-18943

Oct 27, 2026
npm
angularsockets 1.4.5
MAL-2026-18935

Oct 27, 2026
npm
astrabail 1.0.10, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.6, 1.2.0, 1…
MAL-2026-18937

Oct 27, 2026
npm
alisaaai-baileys 1.0.6
MAL-2026-18930

Oct 27, 2026
npm
amanexfujimiya-baileys 8.6.22, 8.6.23, 8.6.24, 8.6.25, 8.6.26
MAL-2026-18933

Oct 27, 2026
npm
baileys-multidev 8.0.2
MAL-2026-18942 2 IOCs

Oct 27, 2026
npm
baileys-mood 0.5.0, 0.5.1
MAL-2026-18941

Oct 27, 2026
npm
baileys-p 6.7.19, 6.7.20, 6.7.21, 6.7.22, 6.7.23, 6.7.24, 6.8.0
MAL-2026-18944

Oct 27, 2026
npm
alisaai-baileys 10.0.0, 11.0.0, 11.1.0, 11.2.0, 8.5.4, 9.0.0, 9.1.0
MAL-2026-18931

Oct 27, 2026
npm
@vinxwhy1st/bails 2.0.0
MAL-2026-18908

Oct 27, 2026
npm
@xyrozero/baileys-mod 8.0.14
MAL-2026-18916 4 IOCs

Oct 27, 2026
npm
@violetix/baileys 0.3.18, 0.4.0
MAL-2026-18911

Oct 27, 2026
npm
baileys-akiko 1.0.1
MAL-2026-18939

Oct 27, 2026
npm
@zetagoaurum-socket/wasocket 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.2.0, 2.…
MAL-2026-18927 2 IOCs

Oct 27, 2026
npm
baileys-xdk 0.1.0
MAL-2026-18948

Oct 27, 2026
npm
@vinzsocket/baileys 3.3.1, 3.3.13
MAL-2026-18909

Oct 27, 2026
npm
@wilzzofcc/baileys 1.0.0
MAL-2026-18912 3 IOCs

Oct 27, 2026
npm
@thunderx/baileys 2.0.0
MAL-2026-18904 2 IOCs

Oct 27, 2026
npm
@yazxzofficial/baileys-mod 5.0.7, 5.0.8
MAL-2026-18918

Oct 27, 2026
npm
@xsat10/baileys 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4
MAL-2026-18915

Oct 27, 2026
npm
@xjokerofficial/baileys 6.1.4
MAL-2026-18914

Oct 27, 2026
npm
baileeys 1.0.0
MAL-2026-18938

Oct 27, 2026
npm
@xianntood/baileys 1.0.0
MAL-2026-18913 2 IOCs

Oct 27, 2026
npm
@skyzeeshop/baileys-mod 8.0.8, 8.0.9
MAL-2026-18902 2 IOCs

Oct 27, 2026
npm
@yazxz-pedia/baileys 6.0.13, 6.0.15
MAL-2026-18917

Oct 27, 2026
npm
alwaysaqioo 1.1.1, 1.1.5
MAL-2026-18932

Oct 27, 2026
npm
baileys-web4.1 0.1.1
MAL-2026-18947

Oct 27, 2026
npm
@yemo-dev/yebail 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2.0, 1.2.1, 2.0.0, 2.0.1, 2.…
MAL-2026-18919

Oct 27, 2026
npm
@trashcore/baileys 4.0.0, 4.0.1, 4.0.2, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.1.0, 4.1.1, 4.1.2, 4.…
MAL-2026-18905

Oct 27, 2026
npm
baileys-dula 1.0.0, 1.0.1, 5.0.1
MAL-2026-18940

Oct 27, 2026